VDB
Sign up
HIGH7.5

GHSA-7p7h-4mm5-852v

Uncontrolled Resource Consumption in trim-newlines

Quick fix

GHSA-7p7h-4mm5-852v — trim-newlines: upgrade to the fixed version with the command below.

npm install trim-newlines@3.0.1

Details

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the `.end()` method.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/trim-newlines
Introduced in: 0Fixed in: 3.0.1
Fixnpm install trim-newlines@3.0.1
npm/trim-newlines
Introduced in: 4.0.0Fixed in: 4.0.1
Fixnpm install trim-newlines@4.0.1

References